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(54) Managing computer for a plurality of computers connected via a network 



(57) A managing computer is arranged by an 
acquiring device (106) for acquiring log information and 
event information from any of plural computers con- 
nected via a network to each other, the log information 
indicating as to whether or not an execution of an oper- 
ation process is carried out under normal condition, and 
the event information indicating concisely as to whether 
or not an execution of an operation process is carried 
out under normal condition; a data controller (101) for 
storing into a database, operation definition information 
. used to define a schedule of process operations exe- 
cuted in the plural computers in relation to the log infor- 
mation and the event information acquired by the 
acquiring device; and a display device (308) for display- 
ing the operation definition information in relation to 
event information related to a process operation defined 
by the operation definition information with reference to 
the information stored in the database. Each of the log 
information and the event inforrnation owns a tag indic- 
ative of said log information and a tag i-epresentative of 
said event information. This managing computer may 
have a definition device (104) for forming a schedule of 
process operations which are commonly executed in ail 
of the plural computers; and a distributor (106) for dis- 
tributing the process operation schedule formed by the 
definition device to all of the plural computers. The dis- 
play device displays on the same display screen, the 
operation definition information and the event informa- 
tion in relation to predetermined log information among 



the log information. The acquiring device acquires a 
preselected sort of log information at predetermined 
timing. The acquiring device acquires Information other 
than the preselected sort of log information in response 
to a request Thus, an integrated management screen 
can be provided to a user. 

FIG.2 
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Description 

BACKGROUND OF THE INVENTION 

[0001] The present invention is related to a managing 
computer connected to a network to which a plurality of 
computers are connected, for managing these comput- 
ers. More specifically, the present invention is directed 
to a technique capable of managing administrate oper- 
ations executed in the respective computers in a batch 
mode by the managing computer. 
[0002] Managing computers for managing adminis- 
trate operations are described in US Patent No. 
5,169,655 entitled to Weng et aL. and US Patent No. 
5.642,508 entitled to Miyazawa. The administrate oper- 
ations involve a job execution process; and a process 
executed when a specific event occurs. 
[0003] In a large-scaled computer system where a 
plurality of administrate operations may be combined 
with each other to be executed, since definitions as to 
the respective administrate operations must be sepa- 
rately performed and also execution results must be 
independently confirmed, the management for the total 
computer system can be hardly carried out. 
[0004] More specifically, in a large-seated computer 
system, there are certain possibilities that a plurality of 
administrate operations which are executed in combina- 
tion with each other are executed over a plurality of 
computers. Under such a circumstance, in order to real- 
ize a total management as a computer system, proc- 
essed contents as to all of administrate operations may 
be preferably defined and execution results thereof may 
be preferably confirmed by using a single computer, 
namely a single managing computer. 
[0005] However, in the case that the definitions of the 
processed contents and the confirmations of the execu- 
tion results as to all of the administrate operations may 
be performed by one managing computer, since the 
managing computer must be communicated with the 
respective computers, a specific care should be paid to 
the network traffics. 

SUMMARY OF THE INVENTION 



and event information from any of plural computers 
connected via a network to each other, said log 
information indicating as to whether or not an exe- 
cution of an operation process is carried out under 
5 normal condition, and said event information indi- 

cating concisely as to whether or not an execution 
of an operation process is carried out under normal 
condition; 

a data controller for storing into a database, opera- 
10 tion definition information used to define a schedule 
of process operations executed in said plural com- 
puters in relation to said log information and said 
event information acquired by said acquiring 
device; and 

15 a display device for displaying said operation defini- 
tion information in relation to event information 
related to a process operation defined by said oper- 
ation definition information with reference to the 
information stored in said database. It is possible to 

20 . provide a managing computer, according to a first 
aspect of the present invention, is featured by such 
a managing computer connected to a network to 
which a plurality of computers are corinected, for 
managing these computers, comprising: 

25 acquisition means for acquiring log information 
indicative of an execution result of an administrate 
operation executed in each of the computers and 
also event information indicative of an event 
occurred in an execution stage of the administrate 

30 operation from each of said computers; 

storage means for into a database, operation defini- 
tion information in which a schedule of the adminis- 
trate operations executed in the respective 
computers, and also the log information and the 

35 event information acquired by said acquisition 
means; and 

display means for displaying the operation defini- 
tion information related to the respective computers 
in relation to log information and event information 
40 of an administrate operation defined by the opera- 
tion definition information with reference to the 
information stored into the database by the storage 
means. 



[0006] Therefore, an object of the present invention is 
to realize such a computer system to which a plurality of 
computers are connected. In this computer system, a 
managing computer for managing these computers can 
manage administrate operations executed in the 
respective computers are managed in a batch mode. 
[0007] Furthermore, another object of the present 
invention is to avoid such that an extra load is given to a 
network connecting a managing computer group, which 
is caused by an operation managing computer. 
[0008] To achieve the above-described object, there is 
provided a managing computer comprising: 

an acquiring device for acquiring log information 



45 [0009] Also, a managing computer, according to a 
second aspect of the present invention, is featured by 
such a managing computer connected to a network to 
which a plurality of computers are connected, for man- 
aging these computers, comprising: 

50 

acquisition means for acquiring log information 
indicative of an execution result of an administrate 
operation executed in each of the computers and 
also event information indicative of an event 
55 occurred in an execution stage of the administrate 
operation from each of said computers; 
storage means for into a database, operation defini- 
tion information in which a schedule of the adminis- 
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trate operations executed in the respective 
computers, and also the log information and the 
event information acquired by said acquisition 
means; and 

display means for displaying both a region for 
describing a list of administrate operations defined 
by the operation definition information related to 
each of the computers and also another region for 
describing log information of said computer on the 
same screen with reference to the information 
stored into the database by the storage means. It is 
possible to display relative information between an 
event and event definition information together with 
either of them. 

[0010] Also, a managing computer, according to a 
third aspect of the present invention, is featured by such 
a managing computer connected to a network to which 
a plurality of computers are connected, for managing 
these computers, comprising: 

definition means for forming in a batch mode both a 
schedule of each of administrate operations and 
operation definition information in which a computer 
which should execute each of the administrate 
operations is defined; 

distribution means for distributing the operations 
definition information; 

acquisition means for acquiring the operation defi- 
nition information individually formed by the com- 
puters from the respective computers and 
operation definition information in which a portion of 
the operation definition information distributed by 
the distribution means and related to the own com- 
puter is expanded by the computer from the distrib- 
uted operation definition information, and also for 
acquiring log information indicative of an execution 
result of an administrate operation executed in each 
of the computers and also event information indica- 
tive of an event occurred tn^an execution stage of 
the administrate operation from each of said com- 
puters; 

storage means for into a database, the operation 
definition information acquired by the acquisition 
means, and also the log information and the event 
information acquired by the acquisition means; and 
display means for displaying the operation defini- 
tion information related to the respective computers 
In relation to log information and event information 
of an administrate operation defined by the opera- 
tion definition information with reference to the 
information stored into the database by the storage 
means. 

[0011] It should be understood that each of the com- 
puters managed by the managing computer according 
to the third aspect many expand the operation definition 
information of a portion related to the own computer 



from the operation definition information distributed 
from the managing computer, and also many convert 
both the log information and the event information of the 
administrate operation executed by the own computer 

5 into a predetermined common format. 

[0012] Also, in the third aspect, the atx)ve-explained 
definition means may define such a computer which 
should execute the administrate operation by employing 
predetermined Information for indicating all of the com- 

10 puters as to the administrate operations to be executed 
by all of the computers. 

[0013] Also, in any of the first aspect to the third 
aspect, the above-described acquisition means may 
acquire at regular timing, or preselected timing a prede- 
75 term in ed sort of log information among the log informa- 
tion of the respective computers, and further may 
acquire other sorts of log information when these sorts 
of log Information is required to be displayed by the dis- 
play means. 

20 [0014] Also, in any of the first aspect to the third 
aspect, the display means may Immediately display 
either all or a portion of the event information acquired 
by the acquisition means after being acquired. 
[0015] It should also be understood in this specif ica- 

25 tlon that a "computer" implies not only an apparatus for 
merely performing a calculation, but also an apparatus 
for executing a communication process and further var- 
ious sorts of information process. 

30 BRIEF DESCRIPTION OF THE DRAWINGS 

[001 6] For a more better understanding of the present 
invention, reference is made of a detailed description to 
be read in conjunction with the accompanying drawings; 
35 in which: 

Fig. 1 schematically shows an overall structural dia- 
gram of a computer system according to an embod- 
iment of the present invention; 

40 Fig. 2 is an explanatory diagram for explaining a 
system arrangement used to form by a managing 
computer in operation definition information for 
defining schedules of administrate operations exe- 
cuted by computers; 

45 Rg. 3 is an explanatory diagram for explaining a 
system arrangement used to manage by the man- 
aging computer In both log information of adminis- 
trate operations and event information, executed by 
the computers; 

50 Rg. 4 schematically represents a hardware struc- 
tural diagram of the managing computer and the 
computers; 

Fig. 5 explanatorily indicates a sequential operation 
for defining/distributing in a batch mode the opera- 
55 tlon definition information in the system arrange- 
ment of Fig. 1, and another sequential operation for 
acquiring/ managing in a batch mode the event 
information and the log information In the system 
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arrangements of Fig. 3; 

Fig. 6 is an explanatory diagram for showing an 
example of the operation definition information 
defined in a batch mode by the managing compu- 
ter; 

Fig. 7A and Fig. 7B are explanatory diagrams for 
indicating an example of the operation definition 
information of Fig. 6. which has been expanded; 
Fig. 8 is an explanatory diagram for representing an 
example of an integrated management screen dis- 
played in the managing computer; 
Figs. 9A and 9B are explanatory diagrams for 
showing examples of the event information dis- 
played in the managing computer; 
Figs. 10A to 10D are explanatory diagrams for rep- 
resenting examples of structures of various sorts of 
tables on a database; 

Fig. 11 is a flow chart for describing a process oper- 
ation after a job is ended under abnormal state; 
Fig. 12 is a diagram for indicating a definition of a 
process operation after the job is ended under 
abnormal state; and 

Fig. 13 is a flow chart for explaining a process oper- 
ation by the managing computer which receives a 
specific event. 

DESCRIPTION OF THE PREFERRED EMBODI- 
MENTS 

[001 7] Referring now to drawings, embodiment modes 
of the present invention will be described. 
[0018] Fig. 1 schematically indicates an entire 
arrangement of a computer system according to an 
embodiment of the present invention. In this drawing, 
reference numeral 401 indicates a managing computer; 
reference numerals 402 to 407 computers which consti- 
tute subjects managed by the managing computer; and 
reference numerals 408 to 413 show networks. 
[0019] In the computer system according to this 
embodiment, the managing computer 401 can form in a 
batch mode operation definition information used to 
define schedules of administrate operations executed in 
the computers 402 to 407, and furthermore the manag- 
ing computer 401 can manage in a batch mode both log 
information indicative of execution results obtained from 
the computers 402 to 407. and event information indica- 
tive of events occurred during execution stage. 
[0020] As a result, since the managing computer 401 
can save the operation definition information, the log 
information, and the event information in a database 
form, this managing computer 401 may refer to the 
above-described information, if necessary, and also 
may display various items related to the above- 
explained information. 

[0021] Fig. 2 schematically represents a system 
arrangement used to form by the managing computer 
401. the operation definition information which defines 
the schedules of the administrate operations executed 



by the computers 402 to 407. It should be understood 
that although Fig. 2 represents only one computer 402 
and the managing computer 401 of Fig. 1. other com- 
puters 403 to 407 may be similarly displayed. 
5 [0022] As indicated in Rg. 2. the managing computer 

401 is arranged by a managing application unit 101, a 
definition information managing unit 102. and a data- 
base 103. 

[0023] The managing application unit 101 contains a 
10 definition unit 104 and an integrated management 
screen display unit 105. The batched definition unit 104 
forms operation definition information used to define a 
schedule of administrate operations executed by the 
computers 402 to 407. The integrated management 
15 screen display unit 1 05 displays an integrated manage- 
ment screen (will be discussed later) and so on. The 
definition information managing unit 102 contains a def- 
inition information distributing/acquiring unit 106 for dis- 
tributing the operation definition information to the 
20 computers 402 to 407. and for acquiring the operation 
definition information from the computers 402 to 407. 
This definition information managing unit 102 stores the 
operation definition information into the database 103. 
and retrieves/referring to the operation definition infor- 
ms mation stored in the database 103. 

[0024] As indicated in Fig. 2, each of the computers 

402 to 407 is arranged by employing an operation exe- 
cution unit and an integrated management agent 113. 
This operation execution unit contains a job execution 

30 control unit 1 1 0. a power supply control unit 1 1 1 . a print 
execution control unit 112 and the like, which execute 
the administrate operation defined by the operation def- 
inition information. 

[0025] The integrated management agent 113 con- 
35 tains a definition information expanding unit 1 14 and a 
definition information notifying unit 115. The definition 
Information expanding unit 1 1 4 expands operation defi- 
nition information of a portion related to the own compu- 
ter from the operation definition information distributed 
40 from the managing computer 401. The definition infor- 
mation notifying unit 115 notifies to the managing com- 
puter 401 , the operation definition information related to 
the own computer and involving also the operation defi- 
nition information individually formed by the own com- 
45 puter. 

[0026] Fig. 3 represents a system arrangement in 
which both log information and event information of 
administrate operations executed by the computers 402 
to 407 are managed in a batch mode by the managing 
50 computer 401. Although Fig. 3 shows only the manag- 
ing computer 401 and one computer 402 of Fig. 1 . other 
computers 403 to 407 are similarly applied to this com- 
puter 402. 

[0027] As indicated in Fig. 3. the managing computer 
55 401 is arranged by employing a managing application 
unit 101, an event/log managing unit 201. and a data- 
base 103. 

[0028] The managing application unit 101 contains the 
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integrated management screen display unit 105 for dis- 
playing the integrated management screen (will be 
explained later) and so on. The event/log managing unit 
201 contains the event/log acquiring unit 202 for acquir- 
ing the event information and the log information from 
the computers 402 to 407, and retrieves/refers to the 
event information and the log information, which are 
stored in the database 103. Also, the event/log manag- 
ing unit 201 stores into the database 103 and outputs to 
the integrated management screen display unit 105 as 
to event information which should be notified in real time 
to an operation manager and so on. 
[0029] As indicated in Fig. 3, each of the computers 
402 to 407 is arranged by employing an operation exe- 
cution unit and an integrated management agent 113. 
This operation execution unit contains a job execution 
control unit 110, a power supply control unit 1 1 1 . a print 
execution control unit 112 and the like, which execute 
the administrate operation defined by the operation def- 
inition 4nformation. 

[0030] The integrated management agent 113 con- 
tains a normalizing unit 210 and an event/log notifying 
unit 211. The normalizing unit 210 converts both log 
information and event information of administrate oper- 
ation executed by the own computer into a predeter- 
mined common format. The event/log notifying unit 21 1 
notifies the normalized log information and the normal- 
ized event information to the managing computer 401 . 
[0031] Fig. 4 schematically indicates a hardware 
structure of the managing computer 401 and the com- 
puters 402 to 407. 

K [0032] As indicated in Fig. 4. each of the computers is 
arranged by employing a central processing unit 301, a 
main storage apparatus 302. a network control appara- 
tus 305, a disk control apparatus 307, and a display 
control apparatus 309. The network control apparatus 
305 controls input/output of data between this network 

> control apparatus 305 and a network such as a commu- 

' nication line 303 and a local area network 304. The disk 
control apparatus 307 controls a disk apparatus 306 
and also input/output thereof. The display control appa- 
ratus 309 controls a display apparatus 308 and also 
Input/output thereof. 

^ [0033] Among the structural blocks of Fig. 2 and Fig. 
3. the database 103 is realized on the disk apparatus 
306. Other structural blocks are realized in such a way 
that a program stored in the disk apparatus 306 is 
loaded by the central processing unit 301 on the main 
storage apparatus 302. It should be noted that this pro- 
gram may be recorded on. for instance, a recording 
medium such as a CD-ROM. and then may be read into 
a driver .(not shown) to be stored into the disk apparatus 
306. 

[0034] Referring now to Fig. 5. a description will be 
made of a sequential operation for defining and distrib- 
uting the operation definition information in the system 
arrangement of Fig. 2. 

[0035] As indicated in Fig. 5. in the managing compu- 



ter 401, the definition information managing unit 102 
stores into the database 103, the operation definition 
information defined by the batched definition unit 104 
contained in the managing application unit 101 (step 

5 601). The operation definition information stored in the 
database 103 is distributed to the computers 402 to 407 
at preselected timing by the definition information dis- 
tributing/acquiring unit 106 contained in the definition 
information managing unit 102 (step 602). 

TO [0036] In the computers 402 to 407 to which the oper- 
ation definition information is distributed, the definition 
information expanding unit 114 owned by the integrated 
management agent 113 expands operation definition 
information of a portion related to the own computer 

15 from the distributed operation definition information. 
The definition information expanding unit 1 14 transfers 
the expanded operation information to the operation 
execution unit such as the job execution control unit 
110. the power supply control unit 111, and the print 

20 execution control unit 112 (step 603). The operation 
execution unit executes the administrate operation 
defined by the respective transferred operation defini- 
tion information (step 604). 

[0037] On the other hand. In the managing computer 

25 401 , the definition information distributing/acquiring unit 
106 of the definition information managing unit 102 
acquires from the computers 402 to 407, the operation 
definition information related to the computers 402 to 
407 and also containing the operation definition infor- 

30 mation individually formed in the computers 402 to 407 
(step 605). Subsequently, the definition information 
managing unit 102 stores the acquired operation defini- 
tion information into the database 103 (step 606). 
[0038] In the case that the integrated screen display 

35 unit 105 owned by the managing application unit 101 
displays an integrated management screen (will be 
explained later) in response to a reference request 
issued from an operation manager and the like, the 
operation definition information stored into the database 

40 103 in this manner will be retrieved/referred by the defi- 
nition information managing unit 102. 
[0039] It should be understood that the operatiori def- 
inition Information may be acquired in such a way that 
the definition information distributing/acquiring unit 106 

45 contained in the definition information managing unit 
102 in the managing computer 401 periodically issues a 
command to the computers 402 to 407. Alternatively 
the acquisition of the operation definition information 
may be realized by such that the definition information 

50 notifying unit 1 1 5 owned by the integrated management 
agent 1 13 in the computers 402 to 407 initiatively noti- 
fies the operation definition information to the managing 
computer 401 at preselected timing. 
[0040] Fig. 6 shows an example of operation definition 

55 information which is defined by the managing computer 
401. In this drawing, reference numeral 701 shows 
operation definition information. 
[0041] In a definition of the operation definition infor- 
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mation 701, a "definition subject 710" corresponds to a 
portion for defining a computer to be defined. The defi- 
nition subject 710 may designate a group constituted by 
a plurality of computers, and a single computer As rep- 
resented in Fig. 6. it should be understood that when 
predetermined information (in this case, "default") is 
designated in "definition subject 710", this information 
implies that all of the computers are the definition sub- 
jects. 

[0042] A "power supply control (71 1 )" corresponds to 
a portion used to define an execution schedule of a 
power supply turning ON/OFF process of a computer to 
be defined, and a turning OFF method. A "job execution 
control (712)" corresponds to a portion used to define a 
job net on a computer to be defined, and a job on the job 
net. In the example of Fig. 6. a "job net A" defines that 
after an execution of a "job Al" has been completed, a 
"job A21'* and a "job A22" are executed in a parallel 
manner, and then when the executions of both these 
jobs A21 and A22 are completed, a "job A3" is exe- 
cuted. 

[0043] As previously explained, since the operation 
manager and the like designate such a computer for 
executing the schedule of the respective administrate 
operations and also the respective administrate opera- 
• tions in the managing computer 401 , the operation defi- 
nition information can be formed in a batch manner, on 
which the schedule of the administrate operation to be 
executed by the computer is defined. 
[0044] Fig. 7A and Fig. 7B show an example of the 
operation definition information 701 of Fig. 6 which is 
expanded by the computer In Fig. 7A and Fig. 7B. there 
are shown operation definition information 801 to 802 
which have been expanded in the computers 402 to 407 
of Fig. 2. Each of the above-described operation defini- 
tion information 801 and 802 is transferred to the power 
supply control unit 1 1 1 and the job execution control unit 
■110.~ 

[0045] Next, a sequential operation for acquiring and 
for managing in a batch mode the event information and 
the log information in the system arrangement of Fig. 3 
will now be described with reference to Fig. 5. 
[0046] As indicated in Fig. 5. in such a case that either 
the event Information or the log information notified from 
the administrate operation unit is equal to a preselected 
sort of Information which should be notified to the man- 
aging computer 401, the normalizing unit 210 owned by 
the integrated management agent 113 in each of the 
computers 402 to 407 converts this event, or log infor- 
mation into a common format to which a discrimination 
of event/log information is added. Then, the converted 
common format is notified by the event/log notifying unit 
21 1 to the managing computer 401 (step 610). 
[0047] In the managing computer 401 to which either 
the event information or the log information is notified, 
the event/log acquiring unit 202 owned by the event/log 
managing unit 201 stores the notified event information, 
or the notified log information into the database 103 



(step 611). The log information is related to an abnor- 
mal state occurred during processing operation and 
includes information related to an abnormal state 
occurred during processing operation, whereas the 

5 event information is such information which is more 
important and concise than the former and necessary to 
inform to the manager computer in real time as to an 
urgent abnormal event occurred in the operation stage 
to be cared for by an operator As a result, in the case 

10 that the event information is notified, it is preferable to 
immediately display this event information on the dis- 
play apparatus 308 by the integrated management 
screen display unit 105 owned by the managing applica- 
tion unit 101 (step 612). It should also be noted that 

75 information may be discriminated as either log informa- 
tion or event information based upon discrimination 
contained in this information. As another embodiment, 
this information may be discriminated as either log infor- 
mation or even information based upon the path through 

20 which this information is transferred. 

[0048] As explained above, in the case that the inte- 
grated management screen display unit 1 05 owned by 
the managing application unit 101 displays an inte- 
grated management screen (will be explained later) in 

25 response to a reference request sent from the operation 
manager, both the event information and the log infor- 
mation stored in the database 103 are retrieved/referred 
by the defiriition information managing unit 102. 
[0049] The notifications of the event information and 

30 the log information may be preferably realized as to 
such event information with a high real time characteris- 
. tic (in particular, event information indicative of failure) 
as follows. In the computers 402 to 407, the event/log 
notifying unit 21 1 owned by the integrated management 

35 agent 113 initiatively notifies the event information to the 
managing computer 401 . As to the notification of the log 
information, in the managing computer 401, the 
event/log acquiring unit 202 owned by the event/log 
managing unit 201 may be realized by regularly issuing 

40 a command to the computers 402 to 407. Alternatively, 
the notification of the log information may be realized by 
that in the computers 402 to 407. the event/log notifying 
unit 211 owned by the integrated management agent 
1 13 initiatively notifies the log information to the manag- 
es ing computer 401 at preselected timing. 

[0050] Subsequently, referring now to Fig. 8, a 
description will be made of one example of an inte- 
grated management screen which is displayed by the 
integrated management screen display unit 103 owned 

50 by the managing application unit 101 in the managing 
computer 401. 

[0051] As previously explained, since the operation 
definition information, the event information, and the log 
information are stored in the database 103 in the man- 
55 aging computer 401 , the operation manager and the like 
may grasp the operations conditions of the computer 
system by utilizing the above-explained information. In 
other words, within the managing computer 401. the 
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integrated management screen display unit 105 owned 
by the managing application unit 101 causes the defini- 
tion information managing unit 102 to retrieve/refer to 
such information which is required by the operation 
manager to refer to. Then, this integrated management 
screen display unit 105 forms as integrated manage- 
ment screen by using the retrieved/referred information, 
and displays the formed integrated management screen 
on the display apparatus 308. As a result, the operation 
manager can grasp the operation condition of the com- 
puter system by observing the integrated management 
screen displayed on the display apparatus 308. 
[0052] In Rg. 8. a first screen 501 is an integrated 
management screen used to confirm computers man- 
aged by the managing computer 401 and also to con- 
firm a group of these computers. In this example, four 
sets of computers A to D are indicated. The respective 
computers A to D are displayed as icons. For example, 
in the first screen 501, the operation manager double- 
clicks "computer A (502)" by using a mouse, so that the 
first screen 501 can be transferred to a second screen 
503. 

[0053] Also, in Fig. 8. the second screen 503 is an 
integrated management screen used to confirm an 
operation condition of "computer A (502)". With respect 
to the "computer A (502)", a present job execution con- 
dition (504), a list (505) of a job net whose execution is 
defined on the "computer A", and a list (506) of log infor- 
mation corresponding to a past operation history are 
displayed in a message form on this second screen 503. 
For example, vyhen the operation manager wants to 
confirm an operation condition related to "job net A" on 
the second screen 503. the operation manager double- 
clicks a column related to "job net A" listed in the job net 
list 505 by using the mouse, so that the second screen 
503 can be transferred to a third screen 507. 
[0054] Also, in Fig. 8, the third screen 507 is an inte- 
grated management screen related to "job net A" on 
"computer A". This integrated management screen indi- 
cates such operation definition information on which a 
series of administrate operations are defined as to 
"computer A", i.e.. "turning ON of power supply (509)", 
"execution of job net A (510)", and "printing of execution 
result (511)". 

[0055] It should be noted that these administrate oper- 
ations 509 to 51 1 are displayed as icons. Since a dis- 
play mode of each of these icons is changed (for 
instance, color and shape are changed), various sorts 
of conditions may be displayed such as "not yet exe- 
cuted", "under execution", "execution is ended under 
normal state", and "execution is ended under abnormal 
state". In this case, when the display modes of the 
respective icons are changed by the integrated man- 
agement screen display unit 105, the latest event infor- 
mation of the corresponding administrate operations 
(509 to 511) is preferably acquired by the event/log 
acquiring unit 202 owned by the event/log managing 
unit 201. 
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[0056] For example, when "job net A (501 )" is double- 
clicked by using the mouse by the operation manager, 
the third screen 507 can be transferred to a sixth screen 
514. 

5 [0057] Also, in Fig, 8, a fifth screen 512 corresponds 
to an integrated management screen used to confirm 
the operation definition Information displayed on the 
third screen (507) in a calendar format. For example, 
since the operation manager selects menu of "calendar 

JO display" (not shown) on the third screen 507. the third 
screen 507 can be transferred to the fifth screen 512. In 
this example, this fifth screen 512 displays that the job 
seen on the third screen is executed on a date 513 of a 
hatched portion. 

15 [0058] Also, in Fig. 8. a sixth screen 514 is a detailed 
integrated management screen related to "job net A" on 
"computer A". This sixth screen 514 defines such that 
as to "job net A", after an execution of "job A1 (515)" is 
completed, both "job A21 (516)" and "job A22 (517)" are 

20 executed in a parallel manner, and when the executions 
of both "job A21 (516)" and "job A22 (517)" are com- 
pleted, "job A3 (518)" is executed. 
[0059] It should also be noted that these jobs are dis- 
played as icons. Since a display mode of each of these 

25 icons is changed (for instance, color is changed), vari- 
ous sorts of conditions may be displayed such as "not 
yet executed", "under execution", "execution is ended 
under normal state", and "execution is ended under 
abnormal state". In this case, when the display modes 

30 of the respective icons are changed by the integrated 
management screen display unit 105, the latest event 
information of the corresponding administrate opera- 
tions (509 to 511 ) is preferably acquired by the event/log 
acquiring unit 202 owned by the event/log managing 

35 unit 201. 

[0060] Also, in Fig. 8, a fourth screen 508 corresponds 
to an integrated management screen used to confirm a 
log with respect to each of job nets. For instance, since 
the operation manager double-clicks a list (506) of the 

40 log information on the second screen 503, the second 
screen 503 can be transferred to the fourth screen 508. 
Alternatively, for example, while the operation manager 
designates a column related to "job net A" within the job 
list 505 by clicking this column by using the mouse, this 

45 operation manager selects menu of "log display" (not 
shown). As a result, the second screen 503 may be 
transferred to another screen (not shown) on which only 
log information of "job net A" is displayed. , 
- [0061] It should be understood .that when the opera- 

50 tion manager selects, for example, the corresponding 
menu within any of the second screen 504 to the sixth 
screen 514, the present screen may be transferred to 
other screens involving such not-shown screens (event 
information display screen, statistical display screen. 

55 operation definition information updating screen etc.). It 
wOl be possible to click a certain message shown in 
screen 508 to additionally display the window 514 or 
507 as indicated with arrows. 
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[0062] As previously explained, in accordance with 
this embodiment, in the managing computer 401. the 
operation definition information related to the respective 
computers is displayed in connection with both the log 
information and the event information of the adminis- 
trate operations defined by this operation definition 
information. As a consequence the operation manager 
can grasp the operation conditions of the computer sys- 
tem, and furthermore can readily reflect the grasped 
operation conditions onto a further plan of the operation 
schedule. 

[0063] As previously described, after the event infor- 
mation is notified, the managing computer 401 prefera- 
bly and immediately displays this notified event 
information on the display apparatus 308. At this time, a 
screen displayed in the managing computer 401 is rep- 
resented in. for instance. Fig. 9A. 
[0064] Fig. 9 A represents an example of a screen on 
which event information of a computer A is displayed as 
a message among the notified event information. In this 
drawing, the message is constructed of an importance 
degree 901 of the event information, day/time 902 to 
903 when the event is notified, a computer 904 of a noti- 
fication source, and a message main body 905. 
[0065] The managing computer 401 may display all of 
the notified event information as a message. Alterna- 
tively, as indicated in Fig. 9B, the managing computer 

401 may display only pre-designated sorts of event 
information. As a pre-designated basis, the following 
items may be conceived, e.g., an importance degree: a 
range for a date and a time instant; a computer of a noti- 
fication source; a sort of administrate operation; and a 
pattern of a character string contained in event informa- 
tion. The operation manager may designate a sort of 
event information displayed as a message by either the 
managing computer 401 or the respective computers 

402 to 407. 

[0066] Then, in the managing computer 401, the 
event/log managing unit 201 judges as to whether or not 
the notified event information is displayed as the mes- 
sage. The event/log managing unit 201 immediately 
notifies to the integrated management screen display 
unit 105 owned by the managing application unit 101. 
such event information which is judged to be displayed 
as a message. Then, the integrated management 
screen display unit 105 displays this judged event infor- 
mation. Therefore, for instance, as represented in Fig. 
9. only such event information indicative of a failure may 
be displayed as a message. It should be understood 
that event/log managing unit 201 stores the notified 
event information into the database 103 irrespective of 
such a judgment result as to whether or not the notified 
event information is displayed as the message. 
[0067] Fig. 10A and Rg. 10B represent one example 
of structures of various sorts of tables on the database 
103. In the drawings, reference numeral 1001 shows an 
event/log table, and reference numeral 1002 indicates 
an operation definition table. 



[0068] The event/log table 1001 is such a table used 
to store thereinto the events and the log information 
acquired from the computer by the managing computer 
401 in a time sequence. A single record is arranged by 

5 "identifier (1010)" "computer name (1011)". "time 
(1012)", "evenVlog sort (1013)". "identifier (1014)". and 
"detailed information (1015)". The identifier 1010 is for 
the event information and the log information. The com- 
puter name 1011 is a name of a computer for notifying 

70 this information. The time 1012 is time when this infor- 
mation is notified. The sort 1013 is the sort of this infor- 
mation. The identifier 1014 is an identifier of operation 
definition information on which administrate operation 
where this information is produced is defined. In the 

15 computer, the information 1010 to 1014 other than the 
detailed information 1015 is normalized as the common 
format commonly used to all of the event information 
and the log information by the normalizing unit 210 
owned by the integrated management agent 1 13. 

20 [0069] As indicated in Fig. 10B to Fig. 10D. an opera- 
tion definition table 1002 is constituted by a common 
table 1003 arranged by an identifier 1016 of operation 
definition information, a name (1017) of a computer to 
be defined, and a sort (1018) of operation definition 

25 information: and also operation definition detailed tables 
1004 to 1005 corresponding to the respective sorts 
(1018) of the operation definition information. 
[0070] The operation definition detailed table 1004 
related to the power supply control is arranged by, for 

30 example, an identifier (1019) of operation definition 
information; a power supply initiation date (1020); a 
power supply initiation time (1021); and a power supply 
turn-OFF date (1022), and also a power supply turn- 
OFF time (1023). The operation definition detailed table 

35 1005 related to the job net is arranged by, for instance, 
an identifier (1024) of operation definition information; a 
name (1025) of a job net: a job net initiation date (1026); 
- a job net initiation time (1027); and a structural job 
(1028). 

40 [0071] In the managing computer 40l/6oth the defini- 
tion information managing unit 102 and the event/log 
managing unit 201 retrieve the tables 1001 to 1004 
shown in Fig. 10A to Fig, 10D based on a language of. 
for instance. SQL. As a result, the integrated manage- 

45 ment screen display unit 105 owned by the managing 
application unit 101 can display such a screen as indi- 
cated in Fig. 8. In particular, the relationship among the 
event information, the log information, and the operation 
definition information may be established by employing 

so the identifier (1014) of the operation definition informa- 
tion contained in the event/log table 1001 and the iden- 
tifiers 1016, 1019, 1024 of the operation definition 
information contained in the operation definition table 
1002. 

55 [0072] It should be noted that when the screen is dis- 
played, in such a case that information required to be 
displayed is not present in the tables 1001 to 1004 of 
Fig. 10. the managing computer 401 is operated in a 
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similar manner to that shown in Fig. 5 so as to acquire 
this information required to be displayed. 
[0073] In the case that such information indicative of a 
failure occurred in operation conditions of the computer 
system is notified as an event, this computer system 
may be operated as follows. First, for example, when a 
specific job is accomplished under abnormal state while 
a job net is being executed, after removing a factor for 
causing this abnormally ended job (e.g.. a specific file 
required to execute a job is not present), the computer 
system may instruct that this inten-upted job is restarted. 
This instruction may be realized as follows. That is, as 
indicated in Fig. 11, in the managing computer, "reexe- 
cution command" for designating "subject computer", 
"job net name", "job name to be reexecuted" is entered 
(1101); this command is transferred to the above- 
explained subject computer (1 102) so as to be executed 
(1 103). Secondly, the computer system may instruct this 
job net to be canceled. This second idea may be real- 
ized as follows. That is, as shown in Fig. 1 1 . in the man- 
aging computer, "cancel command" for designating 
"subject computer " and "job net name" is entered 
(1101); this command is transferred to the above- 
described subject computer (1102) so as to be exe- 
cuted (1 103). Furthermore, thirdly, when a specific job is 
ended under abnormal state while a job net is being 
executed, a specific job and also a specific job net, by 
which an abnormal end event is previously defined as a 
trigger, may be executed. This alternative method may 
be realized as follows. That is, as represented in Fig. 12, 
while the managing computer defines such a process 
operation which should be executed when a specific 
event is received (1201). when the managing computer 
receives this specific event as shown in Fig. 13 (1301), 
this managing computer instructs a subject computer to 
execute the designated process operation (1302). 
Then, the subject computer may execute this instruction 
(1303). At this time, the definition of either the job or the 
job net which should be executed by the subject compu- 
ter may be transferred to be registered when the instruc- 
tion is issued. Otherwise, this definition may be 
previously transferred to be registered, 
[0074] Subsequently, a description will now be made 
of effects achieved in such a case that the operation 
definition information, the event information, and the log 
information are processed in the database form by the 
managing computer 401 to be stored. 
[0075] As a first effect, a network traffic can be 
reduced. In accordance with the present invention, 
since the operation definition information, the event 
information, and the log information are stored in the 
database form by the managing computer 401. the 
managing computer 401 need not acquire the neces- 
sary information from the computer every time the oper- 
ation manager and the like refer to these information. 
[0076] For instance, in the network structure of Fig. 1 . 
when log information of 1 K bytes is acquired from each 
of the six computers 402 to 407 by the managing com- 



puter at a frequency of 1 .000 messages/day a network 
traffic of 6 M bytes/day is produced. In the case that the 
log information is referred by the operation manager at 
a frequency of 10 times/day. a network traffic of 60 M 

5 bytes/day in total is produced. 

[0077] Furthermore, as to such log information with a 
low demand of a real-time characteristic, if such log 
information is collected within such a time range where 
the normal network traffic is low, for example. In a night 

w time range, the network traffic reduction effect can be 
apparently achieved. 

[0078] As a second effect, since the operation defini- 
tion information, the event information, and the log infor- 
mation are stored in the database form by the managing 
15 computer 401. as represented in the integrated man- 
agement screen of Fig. 8. there is another effect that the 
above-explained information can be readily displayed in 
various relationship aspects. 

[0079] In the computer system according to this 

20 embodiment, the computers 402 to 407 are set to be 
defined in a batch mode by the managing computer 
401. However, it is conceivable that other computers 
which do not constitute a definition subject are con- 
nected to the networks 408 to 413. In this case, as a 

25 method for recognizing a subject computer to be man- 
aged by the managing computer 401 . for example, there 
is a method for automatically detecting the integrated 
management agent 113 assembled into the computer 
by using, for example, a broadcasting method. As 

30 another method, a subject computer to be defined may 
be previously defined on the managing computer 401 . 
[0080] Also, in accordance with the computer system 
according to this embodiment, the operation definition 
information in which the schedule of the administrate 

35 Operations executed by the computers 402 to 407 is 
defined can be formed in a batch mode by the manag- 
ing computer 401, and furthermore both the log infor- 
mation and the event information of the administrate 
operations executed by the computers 402 to 407 can 

40 be managed by the managing computer 401, resulting 
in better results. Alternatively, if at least both the log 
information and the event information. can be managed, 
then the operation manager may grasp the operation 
condition of the computer system. 

45 

Claims 

1 . A managing computer (40 1 ) comprising : 

50 an acquiring device (106) for acquiring log 

information and event information from any of 
plural computers connected via a network to 
each other, said log information indicating as to 
whether or not an execution of an operation 

55 process is carried out under normal condition. 

and said event information indicating concisely 
as to whether or not an execution of an opera- 
tion process is carried out under normal condi- 
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tion; 

a data controller (101) for storing into a data- 
base, operation definition information used to 
define a schedule of process operations exe- 
cuted in said plural computers in relation to 5 
said log information arrd said event information 
acquired by said acquiring device; and 
a display device (308) for displaying said oper- 
ation definition information in relation to event 
information related to a process operation io 
defined by said operation definition information 
with reference to the information stored in said 
database. 

2. A program product for storing thereinto a program is 
executed on a computer managed by the managing 
computer as recited in Claim 1 . 

said program comprising: 

a defining process for forming operation defini- 20 
tion information used to define a schedule of 
process operations executed in said plural 
computers; 

an. expanding process for expanding a portion 
within said operation definition information dis- 25 
tributed from said managing computer, said 
portion being related to said managed compu- 
ter; 

a normalizing process for respectively adding a 
tag indicative of a log for an operation process 30 
and a tag representative of an event for an 
operation process to log information and event 
information with respect to a process operation 
executed in said computer to be converted into 
a normalized format; and 35 
an outputting process for outputting said oper- 
ation definition information and said event infor- 
mation, 

3. A program product according to Claim 2. wherein a 40 
definition for a process to be executed in a compu- 
ter when a specified event is received and a com- 
mand for executing the process is transmitted to the 
computer when said event is received. 

45 

4. A storage medium for storing thereinto a program 
executed on a managing computer for managing a 
plurality of computers connected via a network to 
said managing computer, said program is com- 
prised of: 50 

an acquiring process for acquiring log informa- 
tion and event information from any of plural 
computers, said log information indicating as to 
whether or not an execution of an operation 55 
process is carried out under normal condition, 
and said event information indicating as to 
whether or not an execution of an operation 



process is carried out under normal condition 
and necessary to inform to an operator; 
a storing process for storing into a database, 
operation definition information used to define 
a schedule of process operations executed in 
said plural computers in relation to said log 
information and said event information 
acquired by said acquiring device; and 
a displaying process for displaying said opera- 
tion definition information in relation to event 
information related to a process operation 
defined by said operation definition information 
with reference to the information stored in said 
database. 

5. A method for managing a plurality of computers by 
employing a managing computer connected via a 
network to said plurality of computers, comprising: 

a step for acquiring log information and event 
information from any of plural computers con- 
nected via a network to each other, said log 
information indicating as to whether or not an 
execution of an operation process is carried out 
under normal condition, and said event infor- 
mation being more concise than said log infor- 
mation and indicating as to whether or not an 
execution of an operation process is carried but 
under normal condition; 
a step for storing into a database, operation 
definition information used to define a schedule 
of process operations executed in said plural 
computers in relation to said log information 
and said event information acquired by said 
acquiring device; and 

a step for displaying said operation definition 
information in relation to event information 
related to a process operation defined by said 
operation definition information with reference 
to the information stored in said database. 

6. The invention of Claim 1 or 5 wherein: 

each of said log information and said event 
information respectively owns a tag indicative 
of said event information and a tag representa- 
tive of said event information. 

7. The invention of Claim 1 . 4 or 5 wherein: 

a schedule of process operations which are 
commonly executed in alt of said plural comput- 
ers is defined; and 

said process operation schedule is distributed 
to all of said plural computers. 

8. The invention of Claim 1 . 4 and 5 wherein: 
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said operation definition information and said 
event information are displayed on the same 
display screen in relation to predetermined log 
information among said log information. 

5 

9. The invention of Claim 1 . 4 or 5 wherein: 

a preselected sort of log information is - 
acquired at predetermined timing. 

w 

10. The invention of Claim 9 wherein: 

other information than said preselected sort of 
log information is acquired in response to a 
request. '5 

11. The invention of Claim 9, wherein: 

a process is defined which is to be executed in 
a computer when a specified event is received, so 
and 

a command for executing the process is trans- 
mitted when said specified event is received. 

12. A computer operation managing method employed 25 
in a computer system in which a plurality of comput- 
ers are connected via a network to a managing 
computer for managing said plural computers 
wherein: 

30 

said managing computer forms in a batch 
mode operation definition information in which 
a schedule of administrate operations is 
defined and a computer for executing each of 
the administrate operations is defined, and dis- 35 
tributes the formed operation definition infor- 
mation to the respective computers; 
each of said computers individually forms oper- 
ation definition information in which a schedule 
of operations executed by the own computer is 40 
defined, and also forms operation definition 
information in which a portion related to the 
own computer is expanded from said operation 
definition information distributed from said 
managing computer; 45 
said managing computer acquires operation 
definition information related to said computer, 
log information indicative pf an execution result 
of the operation process executed in said com- 
puter, and event information indicative of an so 
event occurred in an execution stage of said 
operation process, and then stores the 
acquired information into a database; and 
said managing computer displays the opera- 
tion related to each of said computers in rela- 55 
tion to log information and event invention of 
administrate operation defined by said opera- 
tion definition information with reference to the 



information stored in said database. 

13. A computer operation managing method as 
claimed in Claim 12, wherein 

a process is defined which is to be executed in 
a computer when a specified event is received, 
and 

said computer executes said process when 
said event is received. 
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